How many vulnerabilities does Defer Forms for Contact Form 7 have?

The audit found 136 findings: 1 critical, 4 high, 74 medium severity.

Should I use Defer Forms for Contact Form 7?

Based on the latest audit (grade D, risk CRITICAL), review the 136 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Defer Forms for Contact Form 7

Q: Is Defer Forms for Contact Form 7 secure?

WP HealthKit's independent audit rates Defer Forms for Contact Form 7 overall risk as CRITICAL with a report-card grade of D.

Audited at release

v2.7.1WordPress PluginAudited 10 days ago

The missing modern layer for Contact Form 7 — visual builder, multi-step, submissions DB, conditional logic, and more. Free.

CRITICAL

Total Findings

136

Security Grade

Security Findings

136

Critical1

High4

Medium74

Low31

Info26

Executive Summary

Is Defer Forms for Contact Form 7 secure? In WP HealthKit's independent 2026 audit, Defer Forms for Contact Form 7 received an overall risk of CRITICAL and a report-card grade of D across 136 findings (1 critical, 4 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.0Mismatch detected

Categories with Findings

SecurityPHP CompatibilityMalware & Nulled PluginDatabaseDependenciesType SafetyWooCommerce CompatibilityHook WiringInternationalizationAccessibilityCoding StandardsTheme StandardsUpdate SafetyPlugin ConflictsPerformancecompatibilityDependency SecurityWordPress Compatibility

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Defer Forms for Contact Form 7 security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/defer-forms-for-contact-form-7)](https://wphealthkit.com/directory/defer-forms-for-contact-form-7)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.0Mismatch detected

Defer Forms for Contact Form 7

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings